Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
File:                     JzWxnbJ9Py131AgYhFO-JrNFUK0.mft (raw, json)
Hash identifier:          izghmfue8sBtB1XzSkhsmhyLhn/tjU+MzJnL0M5FD6E=
Subject key identifier:   0A:4F:DD:62:E4:4A:E0:C2:88:6A:FF:13:11:CF:52:4A:4A:DA:D8:13
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       019E1FB5798CCA82DA6E3F5980D480250BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
Manifest number:          066B
Signing time:             Wed 13 May 2026 05:00:47 +0000
Manifest this update:     Wed 13 May 2026 05:00:47 +0000
Manifest next update:     Thu 14 May 2026 05:00:47 +0000
Files and hashes:         1: JzWxnbJ9Py131AgYhFO-JrNFUK0.crl (hash: 6GmRw0k6KucYJWvOnqE1ycBjGN7g8vPjy1PHw0AAR5A=)
                          2: g84cD1l0NIWiAh0qYxQZFWYbDew.roa (hash: 3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:79:8c:ca:82:da:6e:3f:59:80:d4:80:25:0b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: May 13 05:00:47 2026 GMT
            Not After : May 14 05:00:47 2026 GMT
        Subject: CN=0a4fdd62e44ae0c2886aff1311cf524a4adad813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:50:36:f4:03:d4:45:0f:2c:42:a9:11:26:c2:
                    14:f7:05:de:4b:73:c1:cf:c7:b5:8f:b6:4e:66:b5:
                    ff:37:cf:ef:57:ec:df:0c:ea:ff:88:17:24:67:0f:
                    da:e1:51:9b:b4:c2:57:04:94:ff:e7:c2:1b:9c:90:
                    03:59:0d:2d:c6:f1:ab:21:41:e2:29:d0:00:d8:ef:
                    5f:b4:ae:e4:e9:4f:1d:2e:85:89:2e:77:ab:4d:02:
                    bb:71:66:b7:43:5b:2b:d2:94:a1:89:9c:1c:c8:5a:
                    76:ef:fb:91:b2:7d:07:3e:37:b6:a2:2d:ce:11:6b:
                    b3:36:63:73:17:e4:0d:ff:cc:56:32:56:1e:55:d5:
                    5f:77:74:85:76:bd:71:06:ff:ae:76:ce:3f:0d:b8:
                    be:18:4d:09:4d:f4:18:63:bc:c0:6a:ab:7a:03:b8:
                    18:4d:0b:b1:69:96:f9:26:c9:73:eb:cf:58:a8:b6:
                    69:ce:5d:66:8c:0d:aa:b1:ec:8d:c7:a6:f3:f2:cf:
                    08:1c:18:35:34:0c:85:fb:a6:eb:3b:06:8f:0d:71:
                    19:c7:fc:c5:63:ef:84:13:8a:ba:94:ee:eb:9a:5c:
                    85:b9:50:2b:e0:59:9c:2b:69:0b:4e:68:3d:85:d2:
                    9c:a7:28:64:1b:19:f3:40:3e:fd:e6:cb:7a:ad:eb:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4F:DD:62:E4:4A:E0:C2:88:6A:FF:13:11:CF:52:4A:4A:DA:D8:13
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:3b:37:28:5d:11:98:53:84:65:80:2f:c4:98:cb:6d:6d:
         c2:41:48:48:ee:37:d5:75:af:ad:8c:88:ac:ad:6f:ce:49:04:
         17:b9:a9:36:03:11:f3:be:c9:92:78:f3:68:38:01:f8:83:1d:
         b1:61:2d:cf:36:5a:6a:5b:65:7a:29:d5:af:fd:73:c6:d4:18:
         7e:9c:8f:ad:78:8a:3c:af:e3:66:07:35:46:da:4b:95:a6:ab:
         5a:0f:48:f8:0c:1e:20:fc:cb:98:a6:bd:13:3e:88:83:46:ee:
         d2:33:50:5c:c9:4b:cd:d7:08:5a:40:d0:2a:3e:29:b8:39:f1:
         2c:80:f3:ff:24:9b:e8:05:b9:70:a1:c4:b4:2a:af:5b:78:b9:
         ca:ed:a7:ad:40:60:7f:09:9d:4d:ee:03:c0:07:7c:5c:b4:67:
         f6:3d:20:d9:6e:1f:88:72:f4:71:e1:9e:bf:0b:4f:c2:48:09:
         28:6d:88:ea:c3:53:63:37:be:23:51:bc:5e:98:01:65:7c:95:
         32:62:6f:5a:5f:d7:ab:68:31:f2:75:39:b9:cc:75:5c:43:92:
         9d:3b:3c:78:b5:69:6e:a2:d5:bf:c3:df:65:ef:35:85:41:f6:
         e1:8f:24:ee:0f:60:a2:29:b4:cf:b1:27:05:ed:aa:67:ca:87:
         c4:09:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:24 2026 by rpki-client